Addresses used by Fortinet

Beginning with FortiOS 6.4, anycast is used to update pattern files, web-filter and DNS filter queries. Unfortunately the IP address of the DNS filter is not set automatically in FortiOS. It took me quite a while, to find out the names used.

Here they are:

ServiceUnicast FQDN AdresseAnycast FQDN Adresse
FortiGuard Object Downloadupdate.fortiguard.netglobalupdate.fortinet.net
WebFilter, AntiSpam Ratings über HTTPSsecurewf.fortiguard.netglobalguardservice.fortinet.net
WebFilter, Antispam Ratings über UDPservice.fortiguard.net
Device Info Collectionglobaldevcollect.fortinet.net
Device Info Queryglobaldevquery.fortinet.net
FortiGate Cloud Logginglogctrl1.fortinet.comgloballogtrl.fortinet.net
FortiGate Cloud Managementmgrctrl1.fortinet.comglobalmgrctrl.fortinet.net
FortiGate Cloud Messagingmsgctrl1.fortinet.comglobalmsgctrl.fortinet.net
FortiGate Cloud Sandboxaptctrl1.fortinet.comglobalaptctrl.fortinet.net
Product API used by OCVPN and GUI Icon Downloadproductapi.fortinet.comglobalproductapi.fortinet.net
FortiCare Registrationdirectregistration.fortinet.comglobalregistration.fortinet.net
Secure DNS (DNS Filter) FortiGate SDNS Serversdns.fortinet.netglobalsdns.fortinet.net
FortiCloud FortiClientforticlient.fortinet.netglobalfctupdate.fortinet.net
FortiMobile Tokensdirectregistration.fortinet.comglobalftm.fortinet.net
EMS Cloudforticlient-emsproxy.forticloud.com
DDNSddns.fortinet.netglobalddns.fortinet.net
GeoIPgip.fortinet.netglobalgip.fortinet.net
IP Blocklistipbl.fortinet.net

 

Fortinet maintains a list with ⇒Ports and Protocols.

 

Most wanted servers are the FortiGate SDNS Servers:

Unicast:

  • USA: 208.91.112.220
  • UK: 45.75.200.89 UK

Anycast:

  • 173.243.140.53